ACFE CFE - Investigation Exam (page: 1)
ACFE Certified Fraud Examiner - Investigation
Updated on: 25-Dec-2025

Which of the following is NOT true with regard to tracing the disposition of loan proceeds?

  1. Tracing loan proceeds can reveal previous civil offenses committed by the subject
  2. Tracing loan proceeds can determine if the proceeds were deposited into hidden accounts
  3. Tracing loan proceeds can uncover previously unknown witnesses
  4. Tracing loan proceeds can determine if hidden accounts were used for loan payments.

Answer(s): A



If you are seizing a computer for forensic analysis, why is it generally necessary to seize any copiers connected to it?

  1. Many copiers connect via parallel cables, which store and transmit copy job data.
  2. Most copiers store, process, and transmit data m a cloud environment
  3. Many copiers have internal hard drives that might contain information relevant to a fraud examination
  4. Most copiers today are nonimpact copiers, meaning that they store copied images indefinitely.

Answer(s): C



Which of the following can be obtained from a wire transfer record?

  1. The name of the receiving institution's registered agent
  2. The recipient's government identification number
  3. The name of the sender or originator
  4. The sending institution's accreditation type

Answer(s): C



When planning for the interview phase of an investigation, which of the following steps should NOT be taken by the fraud examiner?

  1. Consider what the interview is intended to accomplish and state an objective.
  2. Review the case file to ensure that important information has not been overlooked
  3. Prepare a detailed list of questions to ask the subject during the interview.
  4. Ensure that the interview is held in a venue where the subject will feel Uncomfortable

Answer(s): D



Jackson, a digital forensic examiner for a government agency, is conducting a criminal investigation into the alleged embezzlement of funds from the government's Welfare Department (WD). Ginny. a WD employee, is the prime suspect. Jackson obtains a court order authorizing him to seize Ginny's personal computer for forensic examination.
Which of the following is the MOST ACCURATE statement?

  1. If Ginny's computer is running. Jackson should perform a graceful shutdown by turning it off using the normal shutdown process
  2. If Ginny's computer is off and Jackson needs evidence that exists only in the form of volatile data, he should turn the computer on and retrieve data directly via the computer's normal interface.
  3. If Ginny's computer is off. Jackson should not turn it on unless he plans to use an encryption device that can guarantee that the system's hard drive will not be accessed during startup.
  4. If Ginny's computer is running. Jackson may retrieve data from the computer directly via its normal interface if the evidence that he needs exists only in the form of volatile data

Answer(s): D



Viewing Page 1 of 35



Share your comments for ACFE CFE - Investigation exam with other users:

dixitdnoh@gmail.com 8/27/2023 2:58:00 PM

this website is very helpful.
UNITED STATES


Sanjay 8/14/2023 8:07:00 AM

good content
INDIA


Blessious Phiri 8/12/2023 2:19:00 PM

so challenging
Anonymous


PAYAL 10/17/2023 7:14:00 AM

17 should be d ,for morequery its scale out
Anonymous


Karthik 10/12/2023 10:51:00 AM

nice question
Anonymous


Godmode 5/7/2023 10:52:00 AM

yes.
NETHERLANDS


Bhuddhiman 7/30/2023 1:18:00 AM

good mateial
Anonymous


KJ 11/17/2023 3:50:00 PM

good practice exam
Anonymous


sowm 10/29/2023 2:44:00 PM

impressivre qustion
Anonymous


CW 7/6/2023 7:06:00 PM

questions seem helpful
Anonymous


luke 9/26/2023 10:52:00 AM

good content
Anonymous


zazza 6/16/2023 9:08:00 AM

question 21 answer is alerts
ITALY


Abwoch Peter 7/4/2023 3:08:00 AM

am preparing for exam
Anonymous


mohamed 9/12/2023 5:26:00 AM

good one thanks
EGYPT


Mfc 10/23/2023 3:35:00 PM

only got thru 5 questions, need more to evaluate
Anonymous


Whizzle 7/24/2023 6:19:00 AM

q26 should be b
Anonymous


sarra 1/17/2024 3:44:00 AM

the aaa triad in information security is authentication, accounting and authorisation so the answer should be d 1, 3 and 5.
UNITED KINGDOM


DBS 5/14/2023 12:56:00 PM

need to attend this
UNITED STATES


Da_costa 8/1/2023 5:28:00 PM

these are free brain dumps i understand, how can one get free pdf
Anonymous


vikas 10/28/2023 6:57:00 AM

provide access
EUROPEAN UNION


Abdullah 9/29/2023 2:06:00 AM

good morning
Anonymous


Raj 6/26/2023 3:12:00 PM

please upload the ncp-mci 6.5 dumps, really need to practice this one. thanks guys
Anonymous


Miguel 10/5/2023 12:21:00 PM

question 16: https://help.salesforce.com/s/articleview?id=sf.care_console_overview.htm&type=5
SPAIN


Hiren Ladva 7/8/2023 10:34:00 PM

yes i m prepared exam
Anonymous


oliverjames 10/24/2023 5:37:00 AM

my experience was great with this site as i studied for the ms-900 from here and got 900/1000 on the test. my main focus was on the tutorials which were provided and practice questions. thanks!
GERMANY


Bhuddhiman 7/20/2023 11:52:00 AM

great course
UNITED STATES


Anuj 1/14/2024 4:07:00 PM

very good question
Anonymous


Saravana Kumar TS 12/8/2023 9:49:00 AM

question: 93 which statement is true regarding the result? sales contain 6 columns and values contain 7 columns so c is not right answer.
INDIA


Lue 3/30/2023 11:43:00 PM

highly recommend just passed my exam.
CANADA


DC 1/7/2024 10:17:00 AM

great practice! thanks
UNITED STATES


Anonymus 11/9/2023 5:41:00 AM

anyone who wrote this exam recently?
SOUTH AFRICA


Khalid Javid 11/17/2023 3:46:00 PM

kindly share the dump
Anonymous


Na 8/9/2023 8:39:00 AM

could you please upload cfe fraud prevention and deterrence questions? it will be very much helpful.
Anonymous


shime 10/23/2023 10:03:00 AM

this is really very very helpful for mcd level 1
ETHIOPIA